This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft File: liqjLr7JzqHJPEvVX4XvfgpdT5I.mft (raw, json) Hash identifier: 5wW+mQKOvSEL1XwOmUqubOF1Rt0gkWSuklGcWlGR+GA= Subject key identifier: 2B:AA:65:C2:62:62:96:0C:FB:ED:DE:14:22:10:03:E4:58:8B:B5:21 Authority key identifier: 96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92 Certificate issuer: /CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92 Certificate serial: 019AEF75FB11A998A3DA5537513E6549D156 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft Manifest number: 0B22 Signing time: Fri 05 Dec 2025 17:01:17 +0000 Manifest this update: Fri 05 Dec 2025 17:01:17 +0000 Manifest next update: Sat 06 Dec 2025 17:01:17 +0000 Files and hashes: 1: 40yNe5drs03KBqTPteFk6f_6lOI.roa (hash: +9sbecufhXxr3UfhY0K/1Ke1i8FJRZHe8knUxyECWgU=) 2: NTRuSteXMEXLvayahODmi046fpw.roa (hash: f1MFdssa3cdYy5ca/ZRwnxiIjLIP7jvC8Sw0s1pkpF8=) 3: liqjLr7JzqHJPEvVX4XvfgpdT5I.crl (hash: zB/NpVUxahNinDF2Fuo9qX69uDm3AvHDFnr3/PmOS3o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:75:fb:11:a9:98:a3:da:55:37:51:3e:65:49:d1:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92 Validity Not Before: Dec 5 17:01:17 2025 GMT Not After : Dec 6 17:01:17 2025 GMT Subject: CN=2baa65c26262960cfbedde14221003e4588bb521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6b:0b:e5:27:04:cf:fa:e8:41:37:0c:42:89: 3c:83:ed:9c:03:5c:89:28:f7:db:31:ac:38:04:94: cb:c7:18:f6:60:45:80:58:fe:ed:56:d0:c6:75:b0: a7:3d:8c:5e:55:82:be:92:eb:9b:55:56:78:46:93: 1b:25:f6:c5:8d:2f:c0:f9:d2:ca:f6:56:70:79:00: 68:5b:93:b3:49:17:e7:2c:8d:ca:f4:e0:5a:f6:17: c3:28:39:64:97:63:ea:ae:7e:27:f4:23:fd:b6:7b: 50:01:da:44:7a:cb:13:8b:9a:52:69:17:ce:a1:e1: 37:87:36:6e:9e:20:3c:f8:a1:c2:b4:41:7f:5c:db: 1c:44:c3:1a:84:9d:71:02:68:98:f8:80:af:74:9d: 50:84:fc:9a:8f:a2:76:3d:bb:fc:5a:f4:8e:ba:eb: c0:e9:39:88:ee:11:24:01:9b:30:69:5c:be:16:25: f2:6d:bb:71:d1:f3:47:50:a1:3e:00:ad:fc:f3:1a: 9a:e7:76:3f:af:f7:57:60:2b:b3:5e:e0:f2:51:4d: 03:0f:d0:4d:47:70:e0:6f:69:12:c6:ca:09:42:30: bc:42:5a:63:39:57:c3:74:1f:eb:01:b4:a3:3e:c5: 0e:b0:96:43:8c:c5:dd:01:5a:47:f0:f5:86:ab:0a: 1f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:AA:65:C2:62:62:96:0C:FB:ED:DE:14:22:10:03:E4:58:8B:B5:21 X509v3 Authority Key Identifier: keyid:96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:5c:89:c9:1a:24:ed:4c:8b:f6:b1:26:27:0a:85:8d:c9:07: 1e:3f:ab:16:32:b2:15:30:01:d9:b3:f2:a9:5e:ad:f2:0b:6d: 2b:cb:f4:73:a6:1d:cf:9a:9f:f6:6f:bc:ad:55:3a:88:49:33: 67:61:ab:a5:ba:e9:e0:12:e1:64:e5:36:35:90:ce:13:c8:0b: ca:69:cb:5b:f0:f7:80:f7:a4:2b:91:10:a8:60:2f:c7:46:39: e0:c5:bb:9d:90:43:dc:8e:b9:17:ae:9d:4b:78:d3:68:39:06: 71:ed:d7:8b:f4:f5:81:9b:41:b4:0b:3f:ec:b5:df:16:d2:84: b3:e4:e1:d6:d4:ef:08:cd:ca:c8:47:49:26:8c:28:45:bd:0c: c4:1e:df:f8:f7:ca:e9:96:ca:5a:71:51:d4:2d:cd:1f:23:29: 5f:42:91:18:6e:b2:7e:21:29:63:fd:30:20:73:e2:b4:c4:4f: f7:b6:0e:cc:48:92:1b:03:95:6a:77:ab:b3:17:ff:8f:8e:2e: f4:2f:84:d6:25:85:2c:19:9f:cc:03:65:5f:b3:fc:b3:5a:54: d3:d7:c2:15:1e:c5:89:23:26:76:6a:67:0a:f2:9c:e2:38:9e: 46:82:31:2d:47:d4:d9:9a:46:ce:3f:f9:68:ee:06:e3:d8:4d: db:f2:ed:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrvdfsRqZij2lU3UT5lSdFWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MmFhMzJlYmVjOWNlYTFjOTNjNGJkNTVmODVlZjdlMGE1 ZDRmOTIwHhcNMjUxMjA1MTcwMTE3WhcNMjUxMjA2MTcwMTE3WjAzMTEwLwYDVQQD EygyYmFhNjVjMjYyNjI5NjBjZmJlZGRlMTQyMjEwMDNlNDU4OGJiNTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmsL5ScEz/roQTcMQok8g+2cA1yJ KPfbMaw4BJTLxxj2YEWAWP7tVtDGdbCnPYxeVYK+kuubVVZ4RpMbJfbFjS/A+dLK 9lZweQBoW5OzSRfnLI3K9OBa9hfDKDlkl2Pqrn4n9CP9tntQAdpEessTi5pSaRfO oeE3hzZuniA8+KHCtEF/XNscRMMahJ1xAmiY+ICvdJ1QhPyaj6J2Pbv8WvSOuuvA 6TmI7hEkAZswaVy+FiXybbtx0fNHUKE+AK388xqa53Y/r/dXYCuzXuDyUU0DD9BN R3Dgb2kSxsoJQjC8QlpjOVfDdB/rAbSjPsUOsJZDjMXdAVpH8PWGqwofJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCuqZcJiYpYM++3eFCIQA+RYi7UhMB8GA1UdIwQY MBaAFJYqoy6+yc6hyTxL1V+F734KXU+SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGlxakxyN0p6cUhKUEV2Vlg0WHZmZ3BkVDVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8yZTM4ZWEtYzlmYS00MDEzLTlmZDMt ODU4YzZmODgyOWViLzEvbGlxakxyN0p6cUhKUEV2Vlg0WHZmZ3BkVDVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8yZTM4ZWEtYzlmYS00MDEzLTlmZDMtODU4YzZmODgyOWVi LzEvbGlxakxyN0p6cUhKUEV2Vlg0WHZmZ3BkVDVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVlyJyRok 7UyL9rEmJwqFjckHHj+rFjKyFTAB2bPyqV6t8gttK8v0c6Ydz5qf9m+8rVU6iEkz Z2Grpbrp4BLhZOU2NZDOE8gLymnLW/D3gPekK5EQqGAvx0Y54MW7nZBD3I65F66d S3jTaDkGce3Xi/T1gZtBtAs/7LXfFtKEs+Th1tTvCM3KyEdJJowoRb0MxB7f+PfK 6ZbKWnFR1C3NHyMpX0KRGG6yfiEpY/0wIHPitMRP97YOzEiSGwOVanersxf/j44u 9C+E1iWFLBmfzANlX7P8s1pU09fCFR7FiSMmdmpnCvKc4jieRoIxLUfU2ZpGzj/5 aO4G49hN2/Ltng== -----END CERTIFICATE-----Generated at Fri Dec 5 19:26:33 2025 by rpki-client